This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26042.roa
File: AS26042.roa (raw, json)
Hash identifier: HU3dYj/Km5hVQmme1/4UxX9T5htxwTrA30VNqIkV3hY=
Subject key identifier: F7:31:E9:C2:D2:55:05:0D:19:B7:36:A2:08:D6:92:5B:BA:38:5A:A6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5885CEBDC75FD8FB9787F04B8A70ACAB882C73F1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26042.roa
Signing time: Fri 19 Dec 2025 04:53:34 +0000
ROA not before: Fri 19 Dec 2025 04:48:34 +0000
ROA not after: Fri 18 Dec 2026 04:53:34 +0000
asID: 26042
IP address blocks: 82.38.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 08:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:85:ce:bd:c7:5f:d8:fb:97:87:f0:4b:8a:70:ac:ab:88:2c:73:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 19 04:48:34 2025 GMT
Not After : Dec 18 04:53:34 2026 GMT
Subject: CN=F731E9C2D255050D19B736A208D6925BBA385AA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1d:24:04:ac:ee:41:3f:9e:e0:5e:87:6a:82:
36:0f:71:dc:be:68:b3:14:3d:64:98:5e:4f:43:8e:
92:4e:bc:94:23:9f:a7:8e:ed:29:e6:60:9e:4c:8d:
5d:af:87:cc:c3:c9:e8:4a:0a:42:21:38:00:61:9e:
c8:f7:c2:de:82:60:18:84:41:3a:ee:0e:35:fe:60:
49:4a:02:30:55:ce:28:5d:f9:06:4a:e9:73:8b:c2:
01:28:57:71:74:e4:d1:8b:f8:58:da:85:46:db:58:
7e:c2:e0:fc:6e:30:bd:df:04:bd:69:35:ea:0e:63:
27:51:cb:12:7f:e6:88:f3:7c:40:16:9d:a3:a7:d5:
77:2d:6e:d7:f7:6d:88:dc:68:7f:49:3f:99:1a:12:
20:1c:9a:70:21:0f:33:e7:84:2f:8d:3d:aa:1f:9c:
f6:ac:02:10:93:1c:10:47:f6:87:cd:dd:5e:b0:c2:
97:ab:13:a3:40:69:9b:f4:48:58:b2:bf:c4:4e:b5:
93:e9:13:8a:fc:52:ff:74:cf:6c:69:0c:de:d4:88:
38:f1:90:ee:05:13:4f:5c:f2:75:fe:3f:8c:aa:99:
91:b0:8f:8e:5a:a2:ec:f0:8d:f1:73:be:48:f4:b6:
cb:09:1f:3d:18:3f:9f:6d:8a:7f:0f:96:75:9f:4e:
b7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:31:E9:C2:D2:55:05:0D:19:B7:36:A2:08:D6:92:5B:BA:38:5A:A6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS26042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.170.0/24
Signature Algorithm: sha256WithRSAEncryption
71:09:33:ed:53:03:84:68:04:f1:51:e8:b7:79:29:48:37:64:
0d:a6:0b:3c:a4:d7:7e:03:5f:a0:94:64:ec:40:cc:b5:5a:29:
f4:87:f2:34:c0:77:6a:5d:01:51:64:30:b3:ab:b2:2a:96:44:
03:0a:9a:06:ff:88:89:a1:39:ac:a7:71:5c:68:8a:1d:b2:5c:
f8:ea:ca:63:e0:5f:69:cb:e4:11:d6:a5:17:b5:7b:23:7c:3f:
d3:36:8a:35:36:9f:5e:db:78:03:7a:3a:bc:eb:de:bd:a6:3d:
76:e7:e6:b1:ba:71:00:00:53:a6:d9:39:2a:ae:01:86:13:52:
63:48:b6:cc:2e:33:90:93:38:c8:73:99:99:11:2c:74:39:05:
b0:bb:14:e7:17:b8:cb:2d:4f:d9:f1:6e:16:6b:44:ac:b1:46:
b3:89:0a:3f:cc:a7:04:59:14:f0:1d:9f:52:5c:45:a9:e9:a5:
aa:18:23:4d:f2:ab:87:2f:a1:c3:02:74:b8:e8:fe:c3:3b:17:
00:3b:55:81:0b:17:00:0d:0a:18:f8:d0:80:67:b2:66:b4:a8:
cd:7c:26:30:ea:08:91:49:63:ba:23:93:e0:2d:9b:60:e4:c9:
f5:af:7d:85:ea:42:08:9d:8f:7d:53:c4:e4:7f:aa:39:ab:ba:
98:4a:9d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:38:31 2025 by rpki-client